CompTIA CySA+(Certification)

Exam Topics

• 

  Security Operations (33%): Master comprehensive security operations by analysing system and network architectures, identifying malicious activity indicators across network and host environments, deploying advanced detection tools and techniques including SIEM and threat hunting methodologies, and implementing process improvements that streamline security operations.

• 

  Vulnerability Management (30%): Develop expertise in comprehensive vulnerability management through strategic scanning implementations, expert analysis of assessment tool outputs, sophisticated vulnerability prioritisation using CVSS frameworks, targeted mitigation control recommendations, and structured vulnerability response processes that protect critical infrastructure.

• 

  Incident Response Management (20%): Build proficiency in incident response management by applying attack methodology frameworks like MITRE ATT&CK and cyber kill chains, executing critical incident response activities from detection through recovery, and implementing robust incident management lifecycles with comprehensive planning and forensic analysis capabilities.

• 

  Reporting and Communication (17%): Cultivate advanced reporting and communication skills through detailed vulnerability management reporting that drives stakeholder engagement, strategic incident response reporting that facilitates organisational learning, and metrics-driven communication that demonstrates security program effectiveness and drives continuous improvement.